Sr. Manager IT Audit

Job Overview:

The Internal Audit Senior Manager – IT leads the organization’s IT internal audit and compliance program, with primary responsibility for IT risk and compliance oversight, execution of ERM-aligned audit projects, and facilitation of SOX IT control attestation. This role provides independent and objective assurance over IT governance, cybersecurity, systems, and data integrity while partnering with IT and business leadership to strengthen the control environment and support regulatory compliance.

Responsibilities/Essential Functions:

• Leads the development and execution of the IT audit and compliance program, including ITGCs, application controls, and cybersecurity risk areas.
• Develops and executes risk-based IT audit plans aligned to Enterprise Risk Management (ERM) priorities.
• Conducts audits of ERP systems, infrastructure, identity and access management, change management, and third-party risk.
• Evaluates IT control design and operating effectiveness and identifies opportunities to strengthen the control environment.
• Oversees the SOX IT compliance program, including coordination of ITGC testing and automated controls.
• Partners with IT, Finance, and external auditors to ensure timely completion of SOX testing and remediation.
• Prepares clear and actionable audit reports for senior leadership and the Audit Committee.
• Monitors emerging IT risks and incorporates them into audit planning.
• Leads and mentors IT audit staff while driving continuous improvement in audit methodologies and tools. Performs other duties as needed.

Knowledge/Skills/Abilities:

• Strong knowledge of IT General Controls, application controls, and SOX compliance requirements.
• Understanding of cybersecurity frameworks such as NIST and ISO.
• Ability to align audit activities with ERM priorities and assess complex IT risk environments.
• Strong analytical, communication, and leadership skills.
• Ability to translate technical risks into business impacts and manage multiple priorities effectively.
• Excellent written and verbal communication skills, including executive-level reporting.
• Strong leadership and team development capabilities.
• Ability to manage multiple priorities and deadlines in a dynamic environment.
• Experience with audit, GRC, or data analytics tools strongly preferred (e.g., Alteryx, Power BI, SQL)

Experience/Qualifications:

• Bachelor’s degree in Information Systems, Accounting, or a related field required.
• 6+ years of experience in IT audit, IT risk management, or SOX compliance.
• Experience with ERP systems, including Oracle E-Business Suite preferred.
• Professional certifications such as CISA is preferred; CPA, CIA, CISSP, or CISM a plus.

Competencies:

• Demonstrates leadership and ownership of IT audit and compliance programs.
• Builds strong relationships with stakeholders and communicates effectively at all levels.
• Applies professional skepticism and sound judgment in evaluating risks.
• Drives continuous improvement and maintains integrity and independence in all audit activities.

Working Environment/Safety Requirements/Physical Requirements:

Performs work primarily in a standard office or hybrid environment and must be able to remain seated for extended periods while working on a computer, with occasional standing, walking, and travel as required.